$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cb04f43e-9d8a-3617-9160-d632d0f11ec4.roa File: cb04f43e-9d8a-3617-9160-d632d0f11ec4.roa (raw, json) Hash identifier: go6kRQKad2wZ4TI1DFMnnlw6nxlwD0TYCHU7LmeB8PY= Subject key identifier: 44:5C:4E:AA:18:B3:8B:D6:F0:F2:DB:47:CE:08:D6:D9:DA:A4:61:E3 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AE196F6F17A29506D5EB85F00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cb04f43e-9d8a-3617-9160-d632d0f11ec4.roa Signing time: Sun 17 Aug 2025 01:00:32 +0000 ROA not before: Sun 17 Aug 2025 01:00:32 +0000 ROA not after: Sat 15 Nov 2025 02:00:32 +0000 asID: 36617 IP address blocks: 2001:500:125::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e1:96:f6:f1:7a:29:50:6d:5e:b8:5f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 17 01:00:32 2025 GMT Not After : Nov 15 02:00:32 2025 GMT Subject: CN=b5d5d5f5-4673-4969-9f88-a4aee36aaea6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:da:e0:93:38:00:0e:0b:31:0e:92:9e:1d:08: 57:e3:61:2e:df:72:04:fa:df:35:dc:b5:e3:e2:1d: 39:76:11:04:f5:96:c5:00:b4:37:f6:c6:54:1a:98: 3e:6d:44:b1:92:39:41:3d:d1:c7:dc:92:4c:52:fe: 69:9f:5f:38:dc:33:d3:9a:c4:3a:c4:ef:ec:73:e1: 85:e5:3e:4a:14:6d:c2:38:f1:f6:31:9f:c5:20:87: 02:ab:78:f6:7e:5b:30:13:5c:a0:3a:59:e8:d8:8d: 42:a3:d7:db:0b:45:47:dd:fd:9b:d6:f0:5d:f4:9d: 4d:70:0b:7c:89:76:5a:e3:51:c5:e8:4c:27:8a:3e: b5:7f:b3:09:bf:a5:89:e7:5d:24:77:74:d6:b4:9b: 22:be:ca:de:9d:a4:d8:dc:e0:7c:76:e9:c3:34:0d: c9:9c:3c:5c:0f:10:60:32:20:1b:04:72:df:90:f1: 62:43:83:49:ec:e3:4d:e0:03:6b:6e:5a:a1:9a:bd: 3c:12:a9:43:e1:0f:0d:5b:81:07:04:e3:fd:33:4e: 8f:66:51:06:bf:92:a1:d0:41:17:f8:03:8b:85:a1: 05:cb:3a:49:5e:1f:78:5f:32:df:aa:c1:e6:f3:21: df:96:74:04:02:76:0a:c6:80:3c:52:aa:bd:be:4f: 78:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:5C:4E:AA:18:B3:8B:D6:F0:F2:DB:47:CE:08:D6:D9:DA:A4:61:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cb04f43e-9d8a-3617-9160-d632d0f11ec4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:125:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:d7:db:77:ed:73:d8:c1:07:79:88:1a:4a:ff:d3:80:41:4e: 97:01:3a:7a:17:5d:0a:b5:7e:f7:84:bf:2c:54:00:5d:31:65: 13:2d:a5:6a:64:76:8e:29:d9:ff:74:c9:96:51:5c:c5:8c:6c: 45:5f:56:71:86:8e:d5:4e:d2:6d:6b:de:17:1d:b9:2f:7a:94: 8e:73:ee:68:fe:19:c5:7f:95:fb:f0:46:31:56:01:33:48:52: 7d:5c:0c:c2:2d:42:1c:4f:e4:32:c4:1e:9c:64:56:27:88:bf: 64:9c:df:41:f6:71:5d:c1:7d:00:4c:85:c4:9f:4e:22:36:98: ef:fe:a3:45:ee:93:21:45:ed:e3:a0:f8:82:2c:3e:98:de:13: 3a:b2:f7:09:16:85:ec:fc:65:61:5d:7a:76:82:ff:00:c1:0e: 54:23:73:48:a4:23:2c:01:a5:cf:f0:cf:d0:13:6d:75:07:dc: 2d:73:02:3c:f9:f6:53:0b:ee:6e:0c:23:88:bc:0e:4c:f2:a5: d0:d7:a2:d3:aa:18:e2:44:c1:c8:73:68:6c:62:14:43:fd:80: 58:e1:99:79:cb:ec:be:1a:b4:69:ea:0d:8c:68:cd:1a:3e:e1: 0f:ec:c3:44:e9:56:c3:05:62:89:28:73:4c:91:14:9a:09:d4: e8:d3:5d:66 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWErhlvbxeilQbV64XwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgxNzAxMDAzMloXDTI1MTExNTAyMDAzMlowLzEtMCsGA1UEAxMk YjVkNWQ1ZjUtNDY3My00OTY5LTlmODgtYTRhZWUzNmFhZWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstrgkzgADgsxDpKeHQhX42Eu33IE+t813LXj 4h05dhEE9ZbFALQ39sZUGpg+bUSxkjlBPdHH3JJMUv5pn1843DPTmsQ6xO/sc+GF 5T5KFG3COPH2MZ/FIIcCq3j2flswE1ygOlno2I1Co9fbC0VH3f2b1vBd9J1NcAt8 iXZa41HF6Ewnij61f7MJv6WJ510kd3TWtJsivsrenaTY3OB8dunDNA3JnDxcDxBg MiAbBHLfkPFiQ4NJ7ONN4ANrblqhmr08EqlD4Q8NW4EHBOP9M06PZlEGv5Kh0EEX +AOLhaEFyzpJXh94XzLfqsHm8yHflnQEAnYKxoA8Uqq9vk94aQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFERcTqoYs4vW8PLbR84I1tnapGHjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2IwNGY0M2UtOWQ4YS0z NjE3LTkxNjAtZDYzMmQwZjExZWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEl AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA519t37XPYwQd5iBpK/9OAQU6XATp6F10KtX73 hL8sVABdMWUTLaVqZHaOKdn/dMmWUVzFjGxFX1Zxho7VTtJta94XHbkvepSOc+5o /hnFf5X78EYxVgEzSFJ9XAzCLUIcT+QyxB6cZFYniL9knN9B9nFdwX0ATIXEn04i Npjv/qNF7pMhRe3joPiCLD6Y3hM6svcJFoXs/GVhXXp2gv8AwQ5UI3NIpCMsAaXP 8M/QE211B9wtcwI8+fZTC+5uDCOIvA5M8qXQ16LTqhjiRMHIc2hsYhRD/YBY4Zl5 y+y+GrRp6g2MaM0aPuEP7MNE6VbDBWKJKHNMkRSaCdTo011m -----END CERTIFICATE-----Generated at Sat Aug 23 19:52:45 2025 by rpki-client